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FIGURE 1 
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USER 1 IS ASSIGNED USER KEY 1 THAT IS USED TO ENCRYPT OR SIGN 
MESSAGES PROCESSED BY A DATA PROCESSING SYSTEM 100. 



A MESSAGE SENT BY USER 1 IS HASHED BY CRYPTOGRAPHIC HASH 
FUNCTION IN CLIENT SYSTEM 102 A. 



HASHED, MESSAGE IS ENCRYPTED WITH PRKl OF USER KEY 1 IN 
CLIENT SYSTEM 102A. 



ENCRYPTED, HASHED MESSAGE, THAT HAS THE IDENTITY OF USER 
KEY 1, AND PINs ARE SENT BY USER 1 FROM CLIENT SYSTEM 102A 
TO SERVER SYSTEM 104. 
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SERVER SYSTEM 104 ENCRYPTS USER KEY 1 WITH PRKA OF ASSOCIATED 
KEY A STORED IN SERVER SYSTEM 104. 



SERVER SYSTEM 104 ENCRYPTS ASSOCIATED KEY WITH PRECK OF ECK 107. 



SERVER SYSTEM 104 SENDS ENCRYPTED, HASHED MESSAGE, ENCRYPTED 
USER KEY 1, AND ENCRYPTED ASSOCIATED KEY A TO CLIENT SYSTEM 102A. 



ANY TRACE OF ENCRYPTED, HASHED MESSAGE, USER KEY 1, 
AND PINs ARE EREASED FROM SERVER SYSTEM 104. 
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CLIENT SYSTEM 102 A ELECTRONICALLY TRANSMITS THE 
ENCRYPTED, HASHED MESSAGE, ENCRYPTED USER KEY 1, AND 
ENCRYPTED ASSOCIATED KEY A TO RECIPIENT SYSTEM 1 10 TO 
VALIDATE BY RECIPIENT 1 12 AN ASSOCIATION OF USER 1 WITH 
THE ENCRYPTED, HASHED MESSAGE. 



IF VALIDATION OF USER KEY 1 IS NEEDED OR DESIRED TO BE REVOKED, 
VALIDATION OF THE ENCRYPTED, HASHED MSSAGE ASSOCIATED WITH USER 1 
CAN BE PREVENTED BY REVOKING ASSOCIATED KEY A ON SERVER SYSTEM 104. 
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START 




COMMUNICATION ESTABLISHED AND MAINTAINED BETWEEN DATA 
PROCESSING SYSTEM 100 AND RECIPIENT SYSTEM 1 10. 



RECIPIENT SYSTEM 1 10 RECEIVES FROM CLIENT SYSTEM 102A 
ENCRYPTED, HASHED MESSAGE, ENCRYPTED USER KEY I, AND 
ENCRYPTED ASSOCL\TED KEY A TO VALIDATE BY RECIPIENT 1 12 AN 
ASSOCL\TION OF USER 1 WITH THE ENCRYPTED, HASHED MESSAGE. 



408 



410 



RECIPIENT SYSTEM 110 DECRYPTS ENCRYPTED ASSOCL\TED KEY A 
BY ACCESSING AND USING PUECK OF ECK 107. 
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RECIPIENT SYSTEM 1 10 DECRYPTS ENCRYPTED USER KEY 1 BY 
ACCESSING AND USING PUKA OF ASSOCIATED KEY A. 
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RECIPIENT SYSTEM 1 10 DECRYPTS THE ENCRYPTED, HASHED MESSAGE BY 
ACCESSING AND USING PUKl OF USER KEY 1. 



RECIPIENT SYSTEM 110 ACCESSES AND USES SAME CRYPTOGRAPHIC 
HASH FUNCTION USED BY CLIENT SYSTEM 102 A TO HASH THE MESSAGE 
ATTACHED TO ENCRYPTED, HASHED MESSAGE RECEIVED FROM USER 1. 
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RECIPIENT SYSTEM 1 10 NOTIFIES 
RECIPIENT 1 12 THAT MESSAGE IS 
VALID AND VERIFIED AS BEING 
FROM USERl. 



IS HASHED^ 
MESSAGE 
GENERATED BY 

RECIPIENT 
SYSTEM 110 SAME 
AS DECRYPTED 
HASHED 
MESSAGE? 
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RECIPIENT SYSTEM 1 10 NOTIFIES RECIPIENT 1 12 THAT MESSAGE 
IS NOT VALID AND NOT VERIFIED AS BEING FROM USER 1. 
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